Patent SG-11201811211T-A (SG)
Title: Kernel-based detection of target application functionality using virtual address mapping
Inventor: DE SUBRATO KUMAR
IPC: G06F21/53
Filed: 2017-06-30
Abstract: INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property -C.-- -.` 111111101111 0 DOI HIM 3E1 0 011101111111111111111H1111111111111110111111 Organization International Bureau (10) International Publication Number 03 (43) International Publication Date .../- WO 2018/022255 Al 01 February 2018 (01.02.2018) W I P0 I P C T (51) International Patent Classification: (74) Agent: WIGMORE, Steven P. et al.; Smith Tempel Bla- GO6F 21/53 (2013.01) ha LLC, Two Ravinia Drive, Suite 700, Atlanta, Georgia (21) International Application Number: 30346 (US). PCT/US2017/040492 (81) Designated States (unless otherwise indicated, for every (22) International Filing Date: kind of national protection available): AE, AG, AL, AM, 30 June 2017 (30.06.2017) AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, (25) Filing Language: English DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, (26) Publication Language: English HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, (30) Priority Data: MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, 62/368,223 29 July 2016 (29.07.2016) US OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, 15/245,037 23 August 2016 (23.08.2016) US SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (71) Applicant: QUALCOMM INCORPORATED [US/US]; ATTN: International IP Administration, 5775 Morehouse (84) Designated States (unless otherwise indicated, for every Drive, San Diego, California 92121-1714 (US). kind of regional protection available): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, (72) Inventor: DE, Subrato Kumar; 5775 Morehouse Drive, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, San Diego, California 92121 (US). TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, — = (54) Title: KERNEL-BASED DETECTION OF TARGET APPLICATION FUNCTIONALITY USING VIRTUAL ADDRESS MAP- _ PING = loo = / = MEMORY 104 = VIRTUAL MACHINE 118 APPLICATION BINARY CODE 108 APPLICATION SOURCE CODE 110 = = N - = CPU 102 - = = HIGH-LEVEL OPERATING SYSTEM (HLOS) 106 = = REGISTERED APPLICATIONS 112 VIRTUAL ADDRESS- TO-FUNCTION MAPPING TABLE 120 TRUSTED ZONE 114 = - MALICIOUS CODE DETECTION ALGORITHM(S) 116 IDENTIFIER-TO- VIRTUAL-ADDRESS FIG. I Il MAPPING TABLE 122 ir) ir) N N (57) : Systems, methods, and computer programs are disclosed for detecting high-level functionality of an application exe- c\"' cuting on a computing device. One method comprises storing, in a secure memory on a computing device, a virtual address mapping 0 ---, table for an application. The virtual address mapping table comprises a plurality of virtual addresses in the application binary code . t 1 : mapped to corresponding target application functionalities. The application is registered with a high-level operating system (HLOS). C During execution of the application binary code, the HLOS detects when one or more of the virtual addresses corresponding to the N target application functionalities are executed based on the virtual address mapping table. C [Continued on next page] WO 2018/022255 Al IMEDIM01101 DIDIRMOI00 1EE11OH1111111111111111111111111111 EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). Declarations under Rule 4.17: — as to applicant's entitlement to apply for and be granted a patent (Rule 4.17(11)) — as to the applicant's entitlement to claim the priority of the earlier application (Rule 4.17(iii)) Published: — with international search report (Art. 21(3))